CVE-2017-17201: Input Validation
First published: Thu Feb 15 2018(Updated: )
Some huawei smartphones with software BTV-DL09C233B350, Berlin-L21HNC432B360, Berlin-L22HNC636B360, Berlin-L24HNC567B360, Berlin-L21C10B130, Berlin-L21C185B132, Berlin-L21C464B130, Berlin-L22C346B140, Berlin-L22C636B160, Berlin-L23C605B131, Berlin-L23DOMC109B160, MHA-AL00AC00B125 have a DoS vulnerability. Due to insufficient input validation, an attacker could trick a user to execute a malicious application, which could be exploited by attacker to launch DoS attacks.
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei Btv-emui5.0 | =btv-dl09c233b350 | |
| Huawei Btv-emui5.0 Firmware | ||
| Huawei Berlin-emui5.0 | =berlin-l21hnc432b360 | |
| Huawei Berlin-emui5.0 | =berlin-l22hnc636b360 | |
| Huawei Berlin-emui5.0 | =berlin-l24hnc567b360 | |
| Huawei Berlin-emui5.0 Firmware | ||
| Huawei Berlin-L21 | =berlin-l21c10b130 | |
| Huawei Berlin-L21 | =berlin-l21c185b132 | |
| Huawei Berlin-L21 | =berlin-l21c464b130 | |
| Huawei Berlin-L21 | ||
| Huawei Berlin-l22 Firmware | =berlin-l22c346b140 | |
| Huawei Berlin-l22 Firmware | =berlin-l22c636b160 | |
| Huawei Berlin-l22 Firmware | ||
| Huawei Berlin-l23 | =berlin-l23c605b131 | |
| Huawei Berlin-l23 | =berlin-l23domc109b160 | |
| Huawei Berlin-l23 Firmware | ||
| Huawei MHA-AL00A | =mha-al00ac00b125 | |
| Huawei MHA-AL00A |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2017-17201?
CVE-2017-17201 has been classified as a denial-of-service vulnerability.
How do I fix CVE-2017-17201?
To fix CVE-2017-17201, users should update their Huawei devices to the latest firmware version provided by Huawei.
Which Huawei smartphone models are affected by CVE-2017-17201?
Affected models include BTV-DL09C233B350, Berlin-L21HNC432B360, Berlin-L22HNC636B360, Berlin-L24HNC567B360, and others listed in the vulnerability details.
What impact does CVE-2017-17201 have on devices?
CVE-2017-17201 enables attackers to cause a denial of service, potentially disrupting device functionality.
Is there a workaround for CVE-2017-17201 if I can't update my device?
Currently, there are no recommended workarounds for CVE-2017-17201, and updating firmware is the suggested course of action.
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/severity
- agent/references
- agent/author
- agent/weakness
- agent/description
- agent/softwarecombine
- agent/event
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/huawei
- canonical/huawei btv-emui5.0
- version/huawei btv-emui5.0/btv-dl09c233b350
- canonical/huawei btv-emui5.0 firmware
- canonical/huawei berlin-emui5.0
- version/huawei berlin-emui5.0/berlin-l21hnc432b360
- version/huawei berlin-emui5.0/berlin-l22hnc636b360
- version/huawei berlin-emui5.0/berlin-l24hnc567b360
- canonical/huawei berlin-emui5.0 firmware
- canonical/huawei berlin-l21
- version/huawei berlin-l21/berlin-l21c10b130
- version/huawei berlin-l21/berlin-l21c185b132
- version/huawei berlin-l21/berlin-l21c464b130
- canonical/huawei berlin-l22 firmware
- version/huawei berlin-l22 firmware/berlin-l22c346b140
- version/huawei berlin-l22 firmware/berlin-l22c636b160
- canonical/huawei berlin-l23
- version/huawei berlin-l23/berlin-l23c605b131
- version/huawei berlin-l23/berlin-l23domc109b160
- canonical/huawei berlin-l23 firmware
- canonical/huawei mha-al00a
- version/huawei mha-al00a/mha-al00ac00b125